Privacy Policy.

 1. Who we are

This Privacy Policy is issued by Wardena Venture Holdings (Pvt) Limited (“Wardena”, “the Group”, “we”, “us” or “our”), a diversified corporate group headquartered at 260 Nawala Road, Nawala, Colombo, Sri Lanka, operating heritage companies across two strategic clusters — Construction and Plantation. It applies to personal information collected through wardenaholdings.com (the “Site”) and through enquiries you send to our corporate office.

Individual Group companies may maintain their own privacy notices for products, services or recruitment they operate directly. Where those apply, they will be made available to you separately.

2. Information we collect

We collect only the information needed to respond to you and operate the Site:

• Information you provide — your name, email address, subject and message when you submit the “Send an Inquiry” form or contact us directly; and, where you apply for a role via our Careers page, your CV, employment history and related application details.
• Business contact details — where you represent an investor, strategic partner, financial institution or media outlet, we may hold your professional contact details and organisation.
• Technical information — IP address, browser type, device information, pages visited and referring URLs, collected automatically through server logs and cookies (see Section 10).

We do not intentionally collect sensitive personal data (such as health, religious or biometric information) through the Site, and we ask that you do not include it in your messages.

3. How we use information

We use personal information to:

• respond to enquiries, feedback and requests for information;
• assess and process employment applications;
• communicate with investors, partners, financial institutions and media contacts;
• operate, secure, maintain and improve the Site;
• comply with legal, regulatory and audit obligations; and
• establish, exercise or defend legal claims where necessary.

4. Legal basis for processing

We process personal data in accordance with the Personal Data Protection Act No. 9 of 2021 of Sri Lanka (the “PDPA”). Depending on the context, our processing is based on your consent, the performance of steps you have requested (such as answering an enquiry or considering a job application), our legitimate interests in operating and promoting the Group, or compliance with legal obligations. Where visitors are located in jurisdictions with their own data protection laws (such as the EU GDPR), we honour the protections those laws afford.

5. Sharing and disclosure

We do not sell personal information. We share it only:

• within the Group — with Wardena subsidiaries and affiliated heritage companies where relevant to your enquiry or application;
• with service providers — hosting, IT, email, analytics and professional advisers acting on our instructions under confidentiality obligations;
• with authorities — where required by law, regulation, court order or to protect the rights, property or safety of the Group, our people or others; and
• in corporate transactions — in connection with a merger, acquisition, restructuring or sale of assets, subject to appropriate safeguards.

6. International transfers

The Group serves markets worldwide, and information may be processed on servers or by service providers located outside Sri Lanka. Where personal data is transferred internationally, we take reasonable steps to ensure it receives a level of protection consistent with this Policy and applicable law.

7. Data retention

We retain personal information only for as long as necessary for the purposes described above — typically the duration of our correspondence plus a reasonable period, or as required by law, tax or audit obligations. Unsuccessful job application records are retained for a limited period in case of future opportunities, unless you ask us to delete them sooner.

8. Security

We apply appropriate technical and organisational measures — including access controls, encryption in transit and vendor due diligence — to protect personal information against unauthorised access, alteration, disclosure or destruction. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

9. Your rights

Subject to applicable law, you have the right to:

• request access to the personal data we hold about you;
• request correction or completion of inaccurate data;
• request erasure of your data where there is no lawful basis to retain it;
• withdraw consent where processing is based on consent; and
• object to or request restriction of certain processing.

To exercise any of these rights, contact us using the details in Section 14. You may also lodge a complaint with the Data Protection Authority of Sri Lanka or your local supervisory authority.

10. Cookies and analytics

The Site uses cookies and similar technologies to keep the Site functioning, remember preferences and understand how visitors use our pages (for example, through analytics tools that report aggregated usage statistics). You can control or delete cookies through your browser settings; disabling cookies may affect some Site features. Fonts and embedded media served by third parties may also set their own cookies subject to those providers’ policies.

11. Third-party links

The Site contains links to third-party websites, including our LinkedIn page and the websites of Group companies. We are not responsible for the privacy practices of those sites and encourage you to review their policies.

12. Children’s privacy

The Site is a corporate, investor-facing website and is not directed at children under 18. We do not knowingly collect personal information from children; if you believe a child has provided us information, please contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The revised version will be posted on this page with an updated effective date. Continued use of the Site after changes take effect constitutes acceptance of the updated Policy.